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(54) Resource retrieval over a data network 

(57) A method of downloading resources to a client 
(1) from a content server (3) over a data network A 
resource request message is sent from the client (1) 
and is intercepted at a proxy (2) located in the data net- 
work between the client (1) and the content server (3). 
A header request is sent from the proxy (2) to the con- 
tent server (3), requesting the content server (3) to 
transmit a header, associated with the requested 
resource, to the proxy (2). The header is received at the 
proxy (2) which determines whether or not the header 
contains billing and/or access restrictions. In the event 
that the header does contain billing and/or access 
restrictions, the client's right to receive the requested 
resource is authenticated and, providing the client is 
authenticated, the resource request message is deliv- 
ered from the proxy (2) to the content server (3) and 
subsequently the resource is downloaded from the con- 
tent server (3) to the client (1). 
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Description 

[0001 ] The present invention relates to a method and 
apparatus for retrieving resources from a content server 
over a data network and in particular, though not neces- s 
sariiy, to a method and apparatus for enhancing World 
Wide Web services. 

[0002] The Internet is a global open communications 
network connecting a great number of local area net- 
works, such as networks of various companies, univer- w 
sities and other organizations. These networks may be 
used by a large number of independent workstations 
and computer devices. An individual client may have a 
direct connection to these local area networks or may 
be connected to them through a PSTN (PubOc Switched ts 
Telephone Network) or an ISDN (Integrated Digital 
Services network) using a modem or similar device. 
[0003] The two most often used communication proto- 
cols for the Internet are TCP and IP fjransport Control 
Protocol and Internet Protocol respectively). In most 20 
cases the service provider provides the various serv- 
ices by utilizing so called WWW (World Wide Web) and 
HTTP (HyperText Transfer Protocol) protocols to pro- 
vide a graphical Internet interface for the client terminal 
which is typically a data processing device such as a 25 
microcomputer. The WWW contains, e.g. HTML docu- 
ments (HyperText Markup Language) i.e. "hyperdocu- 
ments", one such document forming one entity which 
can contain text, pictures, even moving pictures, sound, 
links to other documents and even links to other serv- 30 
ices. The skilled person is aware that "services" refers in 
this connection to various kinds of features, products, 
services such as electronic mail, electronic phone book, 
entertainment, assistance and advisory services etc., 
advertisement, games, videos and the like which are ss 
accessible through various communications networks. 
[0004] It is an object of the present invention to 
enhance the operation of a data network content server 
by enabling it to communicate transparently with an 
external billing and authentication server or service, e.g. 40 
an Internet Service Broker, to offer value-added logistic 
services. . 

[0005] Accord ng to a first aspect of the present inven- 
tion there is provided a method of downloading 
resources to a client from a content server over a data 45 
network, the method comprising: 

sending a resource request message from the cli- 
ent; 

intercepting the sent resource request message at so 
a proxy located in the data network between the cli- 
ent and the content server; 
sending a header request from the proxy to the con- 
tent server requesting the content server to transmit 
a header, associated with the requested resource, 55 
to the proxy; 

receiving the header at the proxy and determining 
whether or not the header contains billing and/or 



access restrictions; 

in the event that the header does contain billing 
and/or access restrictions, authenticating the cli- 
ent's right to receive the requested resource; and 
providing the client is authenticated, delivering the 
resource request message from the proxy to the 
content server and subsequently downloading the 
resource from the content server to the client 

[0006] Preferably, said step of authenticating the cli- 
ent's right to receive the requested resource comprises 
conducting an authentication dialogue with an Internet 
Service Broker (ISB). The ISB is a software server plat- 
form which centralizes the logistic services on behalf of 
other content services. These logistic services include, 
without limitation, client identification and authentica- 
tion, access control to the network resources, unified 
billing interface and client identification delivery for serv- 
ice customization. The present invention may provide a 
method for implementing the interface for these logistic 
services for standard web server with standard HTML, 
such that there is no need to mate any proprietary mod- 
ification. 

[0007] The authentication step may additionally com- 
prise a dialogue between the ISB and the cGerrt follow- 
ing the setting up of the dialogue between the proxy and 
the ISB. 

[0008] The present invention may be combined with 
the Internet Service Broker concept which is described 
in PCT/FI97/00426. 

[0009] Preferably, the proxy mediates and stores or 
caches data to minimize loading time of commonly 
requested resources. When a certain hypertext docu- 
ment is requested several times from one or more cli- 
ents, the subsequent requests) may be met by giving 
the already fetched document instead of requesting it 
again from the original source. This generally requires 
confirmation that the original document has not 
changed between successive requests. 
[0010] The proxy may be a program running on a sep- 
arate computer device placed "in front" of the computer 
device oh which the content server is running. Alterna- 
tively, the proxy is a program running on the same com- 
puter as the content server. The proxy monitors the data 
traffic and provides the required logistic service when a 
certain HTTP message is detected. 
[001 1 ] According to a second aspect of the present 
invention there is provided a proxy lor controlling billing 
and access in a data network, the proxy comprising; 

means for intercepting a resource request message 
sent from a client and intended for a content server; 
means for sending a header request to the content 
server requesting the content server to transmit a 
header, associated with the requested resource, to 
the proxy; 

means for receiving the transmitted header and for 
determining whether or not the header contains bill- 
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ing and/or access restrictions; 

means for authenticating the client's right to receive 

the requested resource in the event that the header 

does contain bating and/or access restrictions: and 

means for delivering the resource request message 

to the content server in the event that the client is 

authenticated. 

[0012] According to a third aspect of the present 
invention there is provided a computer memory 
encoded with executable instructions representing a 
computer program lor causing a computer system con- 
nected to a data network to operate as a proxy, the 
proxy operating to: 

intercept a resource request message sent from a 

client and intended for a content server; 

send a header request to the content server 

requesting the content server to transmit a header, 

associated with the requested rescues, to the 

proxy; 

receive the transmitted header and for determining 
whether or not the header contains bOfing and/or 
access restrictions; 

authenticate the client's right to receive the 
requested resource in the event that the header 
does contain billing and/or access restrictions; and 
: deliver the resource request message to the con- 
tent server in the event that the client is authenti- 
cated. 

[0013] For a better understanding of the present 
invention and in order to show how the same may be 
earned into effect reference will now be made, by way of 
example, to the accompanying drawings, in which: 

Figure 1 is a schematic representation of the archi- 
tecture of an embodiment of the present invention; 
Figure 2 is a flaw chart according to one embodi- 
ment of the present invention; and 
Figure 3 is a message semantic diagram according 
| to one embodiment of the present invention. 

[0014] Figure 1 is a schematic presentation of the 
architecture of an embodiment of the present invention. 
A User or client 1 is the end user using a World Wide 
Web Browser which supports identification items which 
a WWW Server can give to the browser and which the 
browser stores and gives back only to the server it orig- 
inally received them from. These infamation items, e.g. 
cookies, enable the connection of several connection- 
less requests into a client session. 
[001 5] Proxy 2 is a software and/or hardware compo- 
nent that monitors the data traffic and takes care of the 
access control and billing using the Internet Service 
Broker (ISB) functionality. WWW Server 3 is a standard 

3d program which delivers an HTML page, and pos- 
e images, sound and other digital data linked into the 



page, tpon a client's request The WWW Server 3 sup- 
ports client defined headers by, for example, .htaccess 
access control mechanism, custom headers or cgj-bin 
programs. Most current WWW servers, for example 

5 APACHE m or those provided by NETSCAPE ™ or 
MICROSOFT™, have this functionality. 
[0016] WWW Data Store 4 is a fie system, database 
or the like, where the client accessible data is stored, 
whilst ISB 5 is the Internet Service Broker which defines 

w unified interfaces tor client identification and authentica- 
tion, and for billing. Proxy Data Store 6 provides a cache 
in which the proxy 2 stores frequently requested docu- 
ments. 

[0017] Before describing the operation of a data 
is retrieving system used by the network of Figure 1, it is 
useful to describe the nature and role of the so-called 
"Header which is associated with request reply mes- 
sages sent over the Internet. The Header is a part of the 
message packet which contains control data related to 
20 the packet. For the purpose of the present example, 
these headers are part of the HTTP protocol (or HTTPS 
which is similar to HTTP but includes means for some 
security functionality). Thus, these headers have the fol- 
lowing form: 

25 

Header-field-name: value of the field 

in which the "Header-field-name" specifies the name of 
the header field and the "value of the field" is a charac- 

30 ter string, starting after the field separator ":" and ending 
with the next line feed. This header structure makes it 
relatively easy to add more functionality to the protocol 
by adding more fields, as long as the meaning of the 
existing fields is maintained. 

ss [0018] An example of such a field is 

Content-length: 5345 

o where field name defines that this field contains infor- 
40 mation about the amount of data in the message 
(excluding the header information) and the nunber in 
the value part of the field is interpreted as the data 
amount in bytes as implicitly defined by the meaning of 
field. The present method uses a packet that is built by 
4S following the same design principles as the protocol 
which it relies upon. However, whilst the usual use of the 
protocol headers is point-to-point connections (i.e. con- 
trolling the traffic from the starting point to the end point) 
or between two hops (he. two nodes directly connected 
so together and interacting with each other), the use of the 
header fields in this method is to allow interception at a 
node (the "proxy") which is between the starting point 
and the end point 

[001 9] The header is used to inform the intermediate 
55 node about billing information associated with a 
resource which can be purchased through a public con- 
nection network, ag. the Internet, and which is intended 
to be intercepted by the intermediate node and to be 
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Figure 1 
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